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Box No. I Basis of the report 



1 . With regard to the language, this report is based on the international application in the language in which it was 
filed, unless otherwise indicated under this item. 

□ This report is based on translations from the original language into the following language , 
which is the language of a translation furnished for the purposes of: 

□ international search (under Rules 12.3 and 23.1(b)) 

□ publication of the international application (under Rule 12.4) 

□ international preliminary examination (under Rules 55.2 and/br 55.3) 

2. With regard to the elements* of the international application, this report is based on (replacement sheets which 
have been furnished to the receiving Office in response to an invitation under Article 14 are referred to in this 
report as "originally filed" and are not annexed to this report): 



Description, Pages 

1 , 2, 5, 6 as originally filed 

3, 4 filed with telefax on 01 .05.2005 

Claims, Numbers 

1-14 filed with telefax on 01 .05.2005 

Drawings, Sheets 

1/1 as originally filed 



□ a sequence listing andfor any related table(s) - see Supplemental Box Relating to Sequence Listing 



3. □ The amendments have resulted in the cancellation of: 

□ the description, pages 

□ the claims, Nos. 

□ the drawings, sheets/figs 

□ the sequence listing (specify): 

□ any table(s) related to sequence listing (specify): 



4. □ This report has been established as if (some of) the amendments annexed to this report and listed below 
had not been made, since they have been considered to go beyond the disclosure as filed, as indicated in the 
Supplemental Box (Rule 70.2(c)). 

□ the description, pages 

□ the claims, Nos. 

□ the drawings, sheets/figs 

□ the sequence listing (specify): 

□ any table(s) related to sequence listing (specify): 

* If item 4 applies, some or all of these sheets may be marked "superseded, " 
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Box No. V Reasoned statement under Article 35(2) with regard to novelty, inventive step or industrial 
applicability; citations and explanations supporting such statement 

1. Statement 



Novelty (N) 


Yes: 


Claims 


1-14 




No: 


Claims 




Inventive step (IS) 


Yes: 


Claims 






No: 


Claims 


1-14 


Industrial applicability (IA) 


Yes: 


Claims 


1-14 




No: 


Claims 





2. Citations and explanations (Rule 70.7): 
see separate sheet 
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Re Item V 

Reasoned statement with regard to novelty, inventive step or industrial applicability; 
citations and explanations supporting such statement 

1 Reference is made to the following documents: 

D1 : HASSLER V ET AL: "Controlling applets' behavior in a browser" COMPUTER 
SECURITY APPLICATIONS CONFERENCE, 1998. PROCEEDINGS. 14TH 
ANNUAL PHOENIX, AZ, USA 7-1 1 DEC. 1998, LOS ALAMITOS, CA, 
USAJEEE COMPUT. SOC, US, 7 December 1998 (1998-12-07), pages 120- 
125, XP010318612 ISBN: 0-8186-8789-4 

D3: EP-A-0 942 368 (LUCENT TECHNOLOGIES INC) 15 September 1 999 (1999- 
09-15) 

2 The present application does not meet the criteria of Article 33(1) PCT, because the 
subject-matter of claims 1-14 does not involve an inventive step in the sense of 
Article 33(3) PCT. 

2.1 The document D3 is regarded as being the closest prior art to the subject-matter of 
claim 1, and discloses (the references in parentheses applying to this document): 

a method of enabling a multitasking computing device to preserve system 

resources (col 3, line 57 - col 4, line 9, comprising the steps of 

(a) determining if an application is in the background or foreground (col 8, lines 

20-31), 

from which the subject-matter of claim 1 differs in that it defines an application 
which is untrusted and suspending the running of the untrusted application while 
the application is in the background but allowing the untrusted application to run 
again once in the foreground. 

The feature of determining whether an application is trusted or untrusted is a well- 
known design option for the person skilled in the art, see for instance document 
D1 (page 120, right-hand column, lines 30-38). 
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Moreover, the feature of transition from one execution state to another execution 
state of a task is known from document D3 (col 9, lines 3-8; col 10, lines 10-20). 

Furthermore, the feature of suspending the running of an application while the 
application is in the background but allowing the application to run again once in 
the foreground is a well-known design option, which fully corresponds to the 
interrupt mechanism suspending the execution of a "background" task, and 
initiating the execution of a "foreground" task, upon occurrence of an interrupt and 
resuming the execution of the background task after handling said interrupt. 

The crucial feature of claim 1 is to suspend an untrusted application only when it 
is in the background. The skilled person, taking into consideration the teaching of 
the document D3 and the above optional features would easily come to the 
conclusion that in order to suspend one particular application he needs to 
make two verifications: 

1 . to verify whether the application is untrusted; 

2. to verify whether the application is running as a background task. 
These two forms of verification are well-known design options, as indicated 
above, and using them together, as an extra check for ensuring that the right 
application is going to be suspended, does not bring any new surprising effect. 

Therefore, the skilled person would effortlessly apply the above optional features 
to the teaching of the document D3 and in so doing, he would arrive, without 
exercising any inventive effort, at the subject-matter of claim 1 . 

Thus, the subject-matter of claim 1 does not involve an inventive step in the sense 
of Article 33(3) PCT. 

2.2 The same reasoning applies, mutatis mutandis, to the subject-matter of the 
corresponding independent claims 12 and 14, which therefore are also considered 
not inventive. 

2.3 The additional features of dependent claims 2-11 and 13 are, insofar as not known 
from the obvious combination of documents D1 and D3 (see passages cited in the 
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International Search Report), routine measures normally to be expected by the 
person skilled in the art, and are therefore not inventive. 
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SUMMARY OF THE INVENTION 



In a first aspect of the present invention, a method of enabling a multitasking computing 
device to preserve system resources comprises the steps of (a) determining if an 
untrusted application is in the background or foreground and (b) suspending the running 
of an untrusted application while that application is in the background but allowing the 
untrusted application to run again once in the foreground. 



It is valuable to preserve system resources (CPU, power) in multitasking computing 
10 devices: For mains powered desktop computers, the fact that applications can run in the 
background and hence still consume some system resource is a waste of CPU and 
scheduler activity. And in the battery operated, portable device domain, it is especially 
valuable to conserve system resources wherever possible since doing so can increase 
battery life, as noted earlier. 

15 

A device implementing the present invention preserves system resources by denying 
system resources and services to background applications that do not meet predefined 
'trust' or certification criteria — i.e. criteria which define the level of trustworthiness of 
the application. There are various criteria that may be relevant in assessing whether a give 
20 application is 'untrusted' or not; these include, without limitation: 

(a) which protected resources on the device can be accessed by the 
application: an 'untrusted' application might be defined as one that is not able to access 
certain predefined protected resources; or 

(b) whether the application was loaded from ROM or RAM: applications 
25 loaded from RAM are likely to be from third party sources and hence less trustworthy 

than applications loaded from ROM, which would typically be provided by the device 
manufacturer; or 

(c) whether the application has been validated using some predefined 
validation or certification process. 

30 

Applications might, in theory, be written so that they take notice of an event sent to 
them when they are sent to background, causing them to automatically cease running. 
But even this is likely to be missed in applications which are from certain kinds of third 
party programmers or are not validated as proper implementations — i.e. 'untrusted' 
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applications. 'Untrusted* applications are therefore more likely to contain a wrong 
implementation of normal background behaviour: hence, merely relying on an 
application to voluntarily cease running when notified that it is in the background is an 
inadequate strategy for untrusted applications. Instead, they need to be actively 
5 prevented from running. 

With the present invention, untrusted third party applications (such as downloaded 
applications like games) are prevented from running in the background and are 
suspended. Trusted applications may still be allowed to run in the background, or they 
10 may be actively prevented in the same way as non-trusted applications, or they may be 
requested (but not prevented) to stop running if in background. Trust will conventionally 
be established for a given application using a signature in the application installation file, 
although there are other techniques that may be deployed as part of the secure 
computing base of the device. 

15 

In a second aspect, there is a multitasking computing device programmed to be capable 
of (a) determining if an untrusted application is in the background or foreground and (b) 
suspending the running of an untrusted application while that application is in the 
background but allowing the untrusted application to run again once in the foreground, 
20 in order to conserve system resources. The device may be battery powered. 

In a third aspect, there is an operating system for a multitasking computing device, the 
operating system being capable of (a) determining if an untrusted application is in the 
background or foreground and (b) suspending the running of an untrusted application 
25 while that application is in the background but allowing the untrusted application to run 
again once in the foreground. 

BRIEF DESCRIPTION OF THE DRAWING 

The invention will be described with reference to the accompanying drawing, which is a 
30 schematic of some of the components of a device in accordance with the present 
invention. 
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CLAIMS 



1. A method of enabling a multitasking computing device to preserve system 
resources, comprising the steps of (a) determining if an untrusted application is in the 
background or foreground and (b) suspending the running of an untrusted application 
while that application is in the background but allowing the untrusted application to run 
again once in the foreground. 

2. The method of Claim 1 in which a window server component determines if the 
untrusted application is in the background or foreground. 

3. The method of Claim 2 in which, for an untrusted application in the background, 
the window server sends a control signal to a scheduler or interrupt handler to prevent 
the application from running. 

4. The method of Claim 1 comprising the further step of preventing an untrusted 
background application from 'polling' for data over a wireless network. 

5. The method of Claim 1 comprising the further step of preventing an untrusted 
background application from running if a display shows a screen saver or is turned off. 

6. The method of Claim 1 in which a trusted application in the background is (i) still 
allowed to run, or (ii) actively prevented from running or (iii) requested to stop running . 

7. The method of Claim 1 in which an application has been deemed to be 
untrusted by the device assessing 

(a) which protected resources on the device can be accessed by the application; or 

(b) whether the application was loaded from ROM or RAM; or 

(c) whether the application has been validated using some predefined validation or 
certification process. 

8. The method of Claim 7 in which a background application is prevented from 
running only if it does not meet predefined 'trust' or certification criteria established 
using a signature in an installation file for the application. 
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9. The method of Claim 1 in which the device is battery powered. 

10. The method of Claim 1 in which the system resources that are preserved are one 
or more of (i) power, (ii) CPU activity and (iii) scheduler activity. 

11. The method of Claim 1 in which the device is powered by a UPS (uninterruptible 
power supply). 

12. A multitasking computing device programmed to be capable of (a) determining 
if an untrusted application is in the background or foreground and (b) suspending the 
running of an untrusted application while that application is in the background but 
allowing the untrusted application to run again once in the foreground. 

13. The device of Claim 11 which is battery powered. 

14. An operating system for a multitasking computing device, the operating system 
being capable of (a) determining if an untrusted application is in the background or 
foreground and (b) suspending the running of an untrusted application while that 
application is in the background but allowing the untrusted application to run again once 
in the foreground. 
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IPEA 
EPO 

D-80298 Munich 
Germany 

31 st April 2005 
Dear Sirs 

PCT/GB2004/002912 

Our ref : App Suspend (PCT) 

Thank you for the Written Opinion of the ISA. 

The Written Opinion cites 2 category Y documents against the independent claims: 
Dl Hassler "Controlling applets' behaviour in a browser" 
D2 RWsSession in Window Server" Symbian 



In light of the citations, the applicant files replacement pages as follows: 



Replacement pages 3, 4, 7, 8 to replace the same pages as originally filed 



Triplicate copies will follow by post, together with one set marked to show all changes. 



Amended Claim 1 now reads: 

1. A method of enabling a multitasking computing device to preserve system 

resources, comprising the steps of (a) determining if an untrusted application is in the 
background or foreground and (b) 



The new text is shown highlighted. Support can be found at 
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Tel: +44 (0)20 7424 1950 Fax: +44 (0)20 7209 0643 
www.origin.co.uk Registration no. 2211999 



Origin is a law firm regulated by The Law Society. A List of Directors is available at the above address. 
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"With the present invention, untrusted third party applications (such as downloaded 
applications like games) are prevented from running in the background and are 
suspended/' Page 4 lines 5 — 8. And also at: 

"When the untrusted application is brought to the foreground again, it is allowed to run 
again." Page 5 lines 24 - 25 

This differs over Dl because nowhere does Dl disclose or suggest suspending an applet 
whilst that applet is in the background but unsuspending it if in the foreground (an 
example of malicious applets in the foreground could be the advertisement applets "that 
constandy appear on a web site" mentioned in the abstract to Dl). The objective of Dl 
is to restrict the effects of a malicious applet; it would be illogical to adapt Dl so that a 
malicious applet was given full system resource access when in foreground. 

In the light of the above amendments and arguments, re-consideration of the present 
application is requested. Should the examiner require further clarification, a further 
Written Opinion is requested. 

Yours faithfully, 



Peter Langley 
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IPEA 
EPO 

D-80298 Munich 
Germany 

16 August 2005 
Dear Sirs 

PCT/6B2004/002912 

Our ref : App Suspend (PCT) 

Thank you for the second Written Opinion of the ISA. 
Novelty/inventive step 

The examiner puts forward an obviousness argument based on two further items of prior 
art: 

D3 (Lucent): this describes how both background and foreground tasks can be analysed; 
if all tasks, irrespective of whether they are in the background or foreground are inactive, then a 
power saving mode can be entered. D3 however has no bearing on denying system 
resources to an nntrusted application. D3 was classified as category A in the ISR. 



Standard interrupt function: a background task is suspended and a foreground task 
initiated when some event occurs. Like D3, this has no direct bearing on denying system 
resources to an nntrusted application. 

The only prior art relevant to the idea of denying system resources to an nntrusted 
application is the originally cited Dl. Whilst Dl describes stopping or suspending applets 
if they behave suspiciously, this is done irrespective of whether a misbehaving applet is in 
the background or foreground. The essence of the present invention is that an untrusted 

Origin Limited 

Twisden Works, Twisden Road, London NW5 1DN Tel: +44 (0)20 7424 1950 Fax: +44 (0)20 7209 0643 

E-mail: peter.langley@origin.co.uk www.origin.co.uk Registration no. 2211999 



Origin is a law firm regulated by The Law Society. A List of Directors is available at the above address. 
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application is suspended only when it is in background. But Dl explicidy teaches away from 
acting against an applet only when it is in the background. Further, this is just like D3, 
which also explicitly teaches away from acting against a task only when it is in the background. 

Because of this, even if Dl could be combined with D3 or the standard interrupt 
function, the result would still be a system that stops or suspends applets if they behave 
suspiciously, irrespective of whether that untrusted applet is in the background or 
foreground. 

Whilst the skilled person could realise that the prior art can be modified to arrive at a 
system in which untrusted applications are suspended only whilst in background, it cannot be 
said that the skilled person would as a matter of course do so. In fact, the likelihood of this 
seems small given the explicit contract teachings in Dl and D3. 

Yours faithfully, 



Peter Langley 



